Paul Moore 7718fa70e2 netlabel: improve domain mapping validation ... [ Upstream commit 6b21e1b77d ] The net/netlabel/netlabel_domainhash.c:netlbl_domhsh_add() function does not properly validate new domain hash entries resulting in potential problems when an administrator attempts to add an invalid entry. One such problem, as reported by Vlad Halilov, is a kernel BUG (found in netlabel_domainhash.c:netlbl_domhsh_audit_add()) when adding an IPv6 outbound mapping with a CIPSO configuration. This patch corrects this problem by adding the necessary validation code to netlbl_domhsh_add() via the newly created netlbl_domhsh_validate() function. Ideally this patch should also be pushed to the currently active -stable trees. Reported-by: Vlad Halilov <vlad.halilov@gmail.com> Signed-off-by: Paul Moore <pmoore@redhat.com> Signed-off-by: David S. Miller <davem@davemloft.net> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2013-06-27 11:27:31 -07:00
..
Kconfig
Makefile
netlabel_addrlist.c	net: use IS_ENABLED(CONFIG_IPV6)	2011-12-11 18:25:16 -05:00
netlabel_addrlist.h	net: use IS_ENABLED(CONFIG_IPV6)	2011-12-11 18:25:16 -05:00
netlabel_cipso_v4.c
netlabel_cipso_v4.h
netlabel_domainhash.c	netlabel: improve domain mapping validation	2013-06-27 11:27:31 -07:00
netlabel_domainhash.h	net: use IS_ENABLED(CONFIG_IPV6)	2011-12-11 18:25:16 -05:00
netlabel_kapi.c	netlabel: use GFP flags from caller instead of GFP_ATOMIC	2012-03-22 19:29:57 -04:00
netlabel_mgmt.c	net: use IS_ENABLED(CONFIG_IPV6)	2011-12-11 18:25:16 -05:00
netlabel_mgmt.h
netlabel_unlabeled.c	netlabel: correctly list all the static label mappings	2013-03-20 13:05:01 -07:00
netlabel_unlabeled.h
netlabel_user.c
netlabel_user.h